Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3Bloons.TD.5.v4.0.zip
windows7-x64
1Bloons.TD.5.v4.0.zip
windows10-2004-x64
1Bloons.TD....es.jpg
windows7-x64
3Bloons.TD....es.jpg
windows10-2004-x64
3Bloons.TD....es.xml
windows7-x64
1Bloons.TD....es.xml
windows10-2004-x64
1Bloons.TD....eb.jpg
windows7-x64
3Bloons.TD....eb.jpg
windows10-2004-x64
3Bloons.TD....eb.xml
windows7-x64
1Bloons.TD....eb.xml
windows10-2004-x64
1Bloons.TD....et.png
windows7-x64
3Bloons.TD....et.png
windows10-2004-x64
3Bloons.TD....et.xml
windows7-x64
1Bloons.TD....et.xml
windows10-2004-x64
1Bloons.TD....op.jpg
windows7-x64
3Bloons.TD....op.jpg
windows10-2004-x64
3Bloons.TD....op.xml
windows7-x64
1Bloons.TD....op.xml
windows10-2004-x64
1Bloons.TD....or.jpg
windows7-x64
3Bloons.TD....or.jpg
windows10-2004-x64
3Bloons.TD....or.xml
windows7-x64
1Bloons.TD....or.xml
windows10-2004-x64
1Bloons.TD....ey.txt
windows7-x64
1Bloons.TD....ey.txt
windows10-2004-x64
1Bloons.TD....in.exe
windows7-x64
1Bloons.TD....in.exe
windows10-2004-x64
1Bloons.TD....in.exe
windows7-x64
1Bloons.TD....in.exe
windows10-2004-x64
1Bloons.TD....pi.dll
windows7-x64
1Bloons.TD....pi.dll
windows10-2004-x64
1Bloons.TD....pi.dll
windows7-x64
3Bloons.TD....pi.dll
windows10-2004-x64
3Analysis
-
max time kernel
118s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
22/07/2024, 04:41
Static task
static1
Behavioral task
behavioral1
Sample
Bloons.TD.5.v4.0.zip
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral2
Sample
Bloons.TD.5.v4.0.zip
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/wattle_trees.jpg
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral4
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/wattle_trees.jpg
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/wattle_trees.xml
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral6
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/wattle_trees.xml
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/web.jpg
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral8
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/web.jpg
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/web.xml
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral10
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/web.xml
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/welcome_sheet.png
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral12
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/welcome_sheet.png
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/welcome_sheet.xml
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral14
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/welcome_sheet.xml
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/workshop.jpg
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral16
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/workshop.jpg
Resource
win10v2004-20240704-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/workshop.xml
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral18
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/workshop.xml
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/z_factor.jpg
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral20
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/z_factor.jpg
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/z_factor.xml
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral22
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/Textures/Ultra/z_factor.xml
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/api_key.txt
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral24
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/Assets/api_key.txt
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/BTD5-Win.exe
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral26
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/BTD5-Win.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/BTD5-Win.exe
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral28
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/BTD5-Win.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/steam_api.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral30
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/steam_api.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/steam_api.dll
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral32
Sample
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/steam_api.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
General
-
Target
Bloons.TD.5.v4.0/Bloons.TD.5.v4.0/steam_api.dll
-
Size
1.4MB
-
MD5
2244a96f98a08ebe7df9a10eed08b03c
-
SHA1
155bdd23ba1e7808626b44c4e80701c67712dda9
-
SHA256
8cf8c309496857676fac26762fce0511b4c280480732e8d20cfa528244669ecf
-
SHA512
4c7593fecae29aa01d75796205659ee029f31fe66ba1e9460cbb1cf90b37a536c069ece36d15d496da6f8c3298dadae9836873d4d10b7a13ce0b97b726440013
-
SSDEEP
24576:kf/eTAmu3GsIIg6FxYVP+EGW/QO5kmW66b0g6KAnJsdEvJqqLiaJbhpTRA9AdkFv:kXy1shg6FxYVP+EGZO5Ub0DqdEvnLiaE
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1976 wrote to memory of 2316 1976 rundll32.exe 30 PID 1976 wrote to memory of 2316 1976 rundll32.exe 30 PID 1976 wrote to memory of 2316 1976 rundll32.exe 30 PID 1976 wrote to memory of 2316 1976 rundll32.exe 30 PID 1976 wrote to memory of 2316 1976 rundll32.exe 30 PID 1976 wrote to memory of 2316 1976 rundll32.exe 30 PID 1976 wrote to memory of 2316 1976 rundll32.exe 30
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Bloons.TD.5.v4.0\Bloons.TD.5.v4.0\steam_api.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1976 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Bloons.TD.5.v4.0\Bloons.TD.5.v4.0\steam_api.dll,#12⤵PID:2316
-